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DETAILED ACTION 

Information Disclosure Statement 

The information disclosure statements filed March 10, 2005 and December 17, 
2007 have been placed in the application file and the information referred to therein has 
been considered as to the merits. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claims 13 and 14 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. With respect to claims 13 and 14, 
each of the claims are directed to a program for performing specific method steps. 
Computer programs do not fall within any of the four statutory classes of an invention as 
defined in 35 USC 101. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 
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Claims 1-15 are rejected under 35 U.S.C. 102(b) as being anticipated by US 
5,850,445 granted to Chan et al. 

Regarding claim 1, Chan meets the claimed limitations as follows: 
"A data processing method performed by means to be authenticated and authenticating 
means, the authenticating means holding key data, the method comprising: performing 
first encryption at the authenticating means using key data related to processing 
permitted to the means to be authenticated among processing relating to the 
authenticating means to generate first authenticating use data; providing the first 
authentication use data and key designation data designating the key data to the means 
to be authenticated; comparing the first authentication use data with second 
authentication use data; and executing the processing related to the key data in the 
authenticating means when the comparison determines that the first authentication use 
data and the second authentication use data are the same." see column 5, lines 28-47; 
column 6, line 54 to column 7, line 28; column 9, line 3 to column 12, line 60 and figures 
4, 5, 7 and 8. 

Regarding claim 2, Chan meets the claimed limitations as follows: 
"A data processing method as set forth in claim 1 , wherein the providing step includes 
writing the first authentication use data and the key designation data in an integrated 
circuit used by the means to be authenticated." see column 5, lines 28-47; column 6, 
line 54 to column 7, line 28; column 9, line 3 to column 12, line 60 and figures 4, 5, 7 
and 8. 

Regarding claim 3, Chan meets the claimed limitations as follows: 
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"A data processing method as set forth in claim 1 , wherein the step of performing the 
first encryption includes generating the first authentication use data using the key data 
related to a function of the authenticating means permitted by the means to be 
authenticated or an access to data held by the authenticating means." see column 5, 
lines 28-47; column 6, line 54 to column 7, line 28; column 9, line 3 to column 12, line 
60 and figures 4, 5, 7 and 8. 

Regarding claim 4, Chan meets the claimed limitations as follows: 
"A data processing method as set forth in claim 1 , wherein the step of performing the 
first encryption step includes generating the first authentication use data by encrypting 
authentication use data, generated using first key data related to the processing 
permitted to the means to be authenticated by a first user, using second key data 
related to the processing permitted to the means to be authenticated by a second user 
received authority by the first user, and the providing step includes providing the key 
designation data designating the second key data to the means to be authenticated." 
see column 5, lines 28-47; column 6, line 54 to column 7, line 28; column 9, line 3 to 
column 12, line 60 and figures 4, 5, 7 and 8. 

Regarding claim 5, Chan meets the claimed limitations as follows: 
"A data processing method as set forth in claim 4, wherein the step of performing the 
first encryption includes using first tamper proofing key data managed by the first user 
to encrypt authentication use data generated using the first key data to produce first 
encrypted authentication use data, encrypting the first encrypted authentication use 
data using the second key data to produce second encrypted authentication use data, 
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and encrypting the second encrypted authentication use data using second tamper- 
proofing key data distributed to the second user by the first user to generate the first 
authentication use data." see column 5, lines 28-47; column 6, line 54 to column 7, line 
28; column 9, line 3 to column 12, line 60 and figures 4, 5, 7 and 8. 

Regarding claim 6, Chan meets the claimed limitations as follows: 
"A data processing method as set forth in claim 1 , wherein the step of performing the 
first encryption includes generating the first authentication use data using a plurality of 
key data related to a plurality of processing relating to the authenticating means, 
respectively." see column 5, lines 28-47; column 6, line 54 to column 7, line 28; column 
9, line 3 to column 12, line 60 and figures 4, 5, 7 and 8. 

Regarding claim 7, Chan meets the claimed limitations as follows: 
"A data encryption processing method as set forth in claim 6, wherein the step of 
performing the first encryption step includes generating the first authentication use data 
using the key data related to a plurality of processing including a function of the 
authenticating means permitted by the means to be authenticated and an access to 
data held by the authenticating means, respectively." see column 5, lines 28-47; column 
6, line 54 to column 7, line 28; column 9, line 3 to column 12, line 60 and figures 4, 5, 7 
and 8. 

Regarding claim 8, Chan meets the claimed limitations as follows: 
"A data processing method as set forth in claim 3, wherein the first authentication use 
data is generated using single key data related to an access to a plurality of data 
modules when the authenticating means holds a plurality of the data modules as data." 
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see column 5, lines 28-47; column 6, line 54 to column 7, line 28; column 9, line 3 to 
column 12, line 60 and figures 4, 5, 7 and 8. 

Regarding claim 9, Chan meets the claimed limitations as follows: 
"A data processing method as set forth in claim 1 , further comprising: provides the key 
designation data from the means to be authenticated to the authenticating means; and 
performing second encryption at the authenticating means using the designated key 
data to generate the second authentication use data." see column 5, lines 28-47; 
column 6, line 54 to column 7, line 28; column 9, line 3 to column 12, line 60 and figures 
4, 5, 7 and 8. 

Regarding claim 10, Chan meets the claimed limitations as follows: 
"A data processing method as set forth in claim 1 , wherein the step of performing the 
first encryption includes generating the first authentication use data using the key data 
to encrypt predetermined data." see column 5, lines 28-47; column 6, line 54 to column 
7, line 28; column 9, line 3 to column 12, line 60 and figures 4, 5, 7 and 8. 

Regarding claim 1 1 , Chan meets the claimed limitations as follows: 
"A data processing method as set forth in claim 1 , further comprising: specifying the key 
data corresponding to a service designated by the means to be authenticated based on 
correspondence data of the service that is a use target of the means to be authenticated 
and a single or a plurality of the key data related to processing relating to the 
authenticating means corresponding to the service, wherein the step of performing the 
first encryption step includes generating the first authentication use data using the key 
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data specified in the specifying step." see column 5, lines 28-47; column 6, line 54 to 
column 7, line 28; column 9, line 3 to column 12, line 60 and figures 4, 5, 7 and 8. 

Regarding claim 12, Chan meets the claimed limitations as follows: 
"A data processing method as set forth in claim 1 1 , wherein the specifying step 
includes providing a screen making the means to be authenticated designate the 
service." see column 5, lines 28-47; column 6, line 54 to column 7, line 28; column 9, 
line 3 to column 12, line 60 and figures 4, 5, 7 and 8. 

Regarding claim 13, Chan meets the claimed limitations as follows: 
"A program for causing a data processing device to execute an authentication process 
between an authenticating means holding key data and a means to be authenticated 
the authentication process comprising: performing first encryption using key data related 
to processing permitted to the means to be authenticated among processing relating to 
the authenticating means to generate first authentication use data; providing the first 
authentication use data and key designation data designating the key data to the means 
to be authenticated; comparing the first authentication use data with second 
authentication use data; and executing the processing related to the key data in the 
authenticating means when the comparison determines that the first authentication use 
data and the second authentication use data are the same." see column 5, lines 28-47; 
column 6, line 54 to column 7, line 28; column 9, line 3 to column 12, line 60 and figures 
4, 5, 7 and 8. 

Regarding claim 14, Chan meets the claimed limitations as follows: 



Application/Control Number: 10/527,331 Page 8 

Art Unit: 2437 

"A program as set forth in claim 13, wherein the step of performing the first encryption 
includes generating the first authentication use data using the key data related to a 
function of the authenticating means permitted by the means to be authenticated or an 
access to data held by the authenticating means." see column 5, lines 28-47; column 6, 
line 54 to column 7, line 28; column 9, line 3 to column 12, line 60 and figures 4, 5, 7 
and 8. 

Regarding claim 15, Chan meets the claimed limitations as follows: 
"A data processing device for providing first authentication use data to means to be 
authenticated when authenticating means holding key data uses key data designated by 
the means to be authenticated for encryption to generate second authentication use 
data, uses the second authentication use data in an authentication with the means to be 
process authenticated, and performs processing related to the key data when the first 
authentication use data and the second authentication use data are the same, the data 
processing device comprising: means to be authenticated; means for generating the 
first authentication use data by encryption using key data related to processing 
permitted to the means to be authenticated among processing relating to the 
authenticating means and means for providing the first authentication use data and key 
designation data designating the key data used to generate the first authentication use 
data to the means to be authenticated." see column 5, lines 28-47; column 6, line 54 to 
column 7, line 28; column 9, line 3 to column 12, line 60 and figures 4, 5, 7 and 8. 



Conclusion 
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The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

A. Nonaka et al (US 20030046238). 

B. Pockrandt (US 6,934,843). 

C. Drupsteen et al (US 6,249,869). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Matthew B. Smithers whose telephone number is (571) 

272- 3876. The examiner can normally be reached on Monday-Friday (8:00-4:30) EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel L. Moise can be reached on (571) 272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 

273- 8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Matthew B Smithers/ 
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